npm compasso @0.6.0
score
0.5815
med
flagged
2026-06-13 18:25
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| provenance_dropped | 0.8 | prior version published with SLSA attestation; current version has none |
| cadence | ||
| rapid_release | 0.8 | 6 versions in last 24h: ['0.4.1', '0.5.0', '0.5.1', '0.5.2', '0.6.0'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo Tchori-Labs/compasso returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"victorcano"
],
"versions": 7
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-Bfteb100Isa3U44tfC9PAFtEZwKTL1MBcR9OaZnMtmba7CHsiMUmyhq0E/mGlBC8o65lZIhvpGC4xZB0OmPfnw==",
"tarball": "https://registry.npmjs.org/compasso/-/compasso-0.6.0.tgz",
"unpackedSize": 4207252
},
"dist-tags": {
"latest": "0.6.0"
},
"latest_version": "0.6.0",
"maintainers": [
{
"email": "npm@tchori.net",
"name": "victorcano"
}
],
"num_versions": 9,
"repository": {
"type": "git",
"url": "git+https://github.com/Tchori-Labs/compasso.git"
},
"scripts": {
"build": "tsup",
"lint": "eslint .",
"prepublishOnly": "pnpm typecheck && pnpm test && pnpm build",
"test": "vitest run",
"test:update": "vitest run -u",
"test:watch": "vitest",
"typecheck": "tsc --noEmit"
},
"signal_details": {
"provenance_dropped": "prior version published with SLSA attestation; current version has none",
"rapid_release": "6 versions in last 24h: ['0.4.1', '0.5.0', '0.5.1', '0.5.2', '0.6.0']",
"repo_doesnt_exist": "claimed repo Tchori-Labs/compasso returns 404 on github.com"
},
"time": {
"created": "2026-06-10T04:08:55.717Z",
"modified": "2026-06-13T23:25:33.187Z"
}
}